CWE-798: Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- fortinet fortiosA use of hard-coded cryptographic key vulnerability in the SSLVPN of FortiOS before 7.0.1 may...7.5 High
- kaseya unitrends backupAn issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The SNMP daemon was...9.8 Critical
- govicture wr1200 firmwareAn issue was discovered on Victure WR1200 devices through 1.0.3. The root SSH password never gets...7.8 High
- govicture wr1200 firmwareAn issue was discovered on Victure WR1200 devices through 1.0.3. The default Wi-Fi WPA2 key is...6.5 Medium
- goqual gkw-ic052, hej hejhome gkw-ic052 firmware +1 moreHejHome IP Camera use of hard-coded credentials vulnerability8.1 High
- airangel hsmx-app-1000 firmware, hsmx-app-100 firmware, hsmx-app-20000 firmware +2 more +4 moreAirangel HSMX Gateway devices through 5.2.04 have Hard-coded Database Credentials.10.0 Critical
- formalmsAn authentication bypass issue in FormaLMS <= 2.4.4 allows an attacker to bypass the...9.8 Critical
- knx engineering tool software 6** DISPUTED ** KNX ETS6 through 6.0.0 uses the hard-coded password ETS5Password, with a salt...5.5 Medium
- cisco policy suite, policy suite (cps) software +1 moreCisco Policy Suite Static SSH Keys Vulnerability9.8 Critical
- cisco catalyst pon series, catalyst pon switch cgp-ont-1p firmware, catalyst pon switch cgp-ont-4p firmware +3 more +5 moreCisco Catalyst PON Series Switches Optical Network Terminal Vulnerabilities10.0 Critical
- auvesy versiondogAUVESY Versiondog8.2 High
- iongroup wallstreet suiteA technical user has hardcoded credentials in Wallstreet Suite TRM 7.4.83 (64-bit edition) with...5.5 Medium
- moxa mxview, mxview network management software +1 moreMoxa MXview Network Management Software9.8 Critical
- cisco business 220-16p-2g firmware, business 220-16t-2g firmware, business 220-24fp-4g firmware +14 more +16 moreCisco Business 220 Series Smart Switches Static Key and Password Vulnerabilities4.9 Medium
- cisco business 220-16p-2g firmware, business 220-16t-2g firmware, business 220-24fp-4g firmware +14 more +16 moreCisco Business 220 Series Smart Switches Static Key and Password Vulnerabilities4.9 Medium
- reiner-sct timecardREINER timeCard 6.05.07 installs a Microsoft SQL Server with an sa password that is hardcoded in...9.8 Critical
- ecoa ecs router controller ecs (flash), ecs router controller-ecs firmware, graphic control software +6 more +8 moreECOA BAS controller - Use of Hard-coded Credentials9.8 Critical
- zohocorp manageengine remote access plusZoho ManageEngine Remote Access Plus before 10.1.2121.1 has hardcoded credentials for read-only...7.5 High
- zohocorp manageengine remote access plusZoho ManageEngine Remote Access Plus before 10.1.2121.1 has hardcoded credentials associated with...7.5 High
- ibm security guardiumIBM Security Guardium 11.3 contains hard-coded credentials, such as a password or cryptographic...7.5 High
- dlink dir-3040 firmwareAn information disclosure vulnerability exists in the WiFi Smart Mesh functionality of D-LINK DIR...10.0 Critical
- enbra ewm, at-wmbus-16-2, er-am dn 15 +1 more +3 moreHard-coded Credentials in Enbra Wireless M-Bus devices6.5 Medium
- qnap qunetswitch, qnap systems inc. qsw-m2116p-2t2s, qnap qsw-m2116p-2t2s firmware +2 moreInsufficiently Protected Credentials Vulnerability in QSW-M2116P-2T2S and QuNetSwitch9.6 Critical
- bab-technologie eibport firmwareBAB TECHNOLOGIE GmbH eibPort V3. Each device has its own unique hard coded and weak root SSH key...7.2 High
- onyaktech comments pro project comments proAn issue was discovered in CommentsService.ashx in OnyakTech Comments Pro 3.8. An attacker can...7.5 High
- adaptivescale lxduiAdaptiveScale LXDUI Hardcoded JWT Secret Key9.8 Critical
- unit4 mik.starlightUse of a hard-coded cryptographic key in MIK.starlight 7.9.5.24363 allows local users to decrypt...5.5 Medium
- pepperl-fuchs wha-gw-f2d2-0-as-z2-eth.eip firmware, wha-gw-f2d2-0-as-z2-eth firmware, phoenix contact wha-gw-f2d2-0-as- z2-eth +1 more +3 moreIn WirelessHART-Gateway versions 3.0.7 to 3.0.9 hard-coded credentials have been found9.8 Critical
- ibm sterling secure proxy, sterling external authentication server +1 moreIBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 contains hard-coded credentials,...4.9 Medium
- dlink dsr-500n firmware** UNSUPPORTED WHEN ASSIGNED ** D-Link DSR-500N version 1.02 contains hard-coded credentials for...9.8 Critical
- dlink dvx-2000ms firmwareD-Link DVX-2000MS contains hard-coded credentials for undocumented user accounts in the '/etc...9.8 Critical
- dlink dvg-3104ms firmware** UNSUPPORTED WHEN ASSIGNED ** D-Link DVG-3104MS version 1.0.2.0.3, 1.0.2.0.4, and 1.0.2.0.4E...9.8 Critical
- altus hadron xtorm hx3040 firmware, nexto nx3003 firmware, nexto nx3004 firmware +12 more +14 moreHardcoded .htaccess Credentials for getlogs.cgi exist on Altus Nexto, Nexto Xpress, and Hadron...7.5 High
- fortinet fortiportalA use of hard-coded credentials (CWE-798) vulnerability in FortiPortal versions 5.2.5 and below,...9.8 Critical
- sapphireimsIn SapphireIMS 5.0, it is possible to use the hardcoded credential in clients (username: sapphire...9.8 Critical
- sapphireimsSapphireIMS 5 utilized default sapphire:ims credentials to connect the client to server. This...7.8 High
- sapphireimsIn SapphireIMS 5.0, it is possible to use the hardcoded credential in clients (username: sapphire...9.8 Critical
- qnap viocard-100 firmware, viocard-300 firmware, viocard-30 firmware +2 more +4 more** UNSUPPORTED WHEN ASSIGNED ** QNAP F_VioCard 2312 and F_VioGate 2308 have hardcoded entries in...9.8 Critical
- ecobee ecobee3 lite firmwareHardcoded default root credentials exist on the ecobee3 lite 4.5.81.200 device. This allows a...9.8 Critical
- ypsomed mylife, mylife cloud +1 moreYpsomed mylife Cloud, mylife Mobile Application, Ypsomed mylife Cloud: All versions prior to 1.7...4.8 Medium
- swisslog-healthcare hmi-3 control panel firmwareAn insecure permissions issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus...9.8 Critical
- dell data protection advisor, emc data protection advisor +1 moreDell EMC Data Protection Advisor versions 6.4, 6.5 and 18.1 contain an undocumented account with...7.5 High
- trixie tx9 automatic food dispenser firmwareTX9 Automatic Food Dispenser v3.2.57 devices allow access to a shell as root/superuser, a related...9.8 Critical
- akkadian provisioning manager engine (pme), akkadianlabs ova appliance, provisioning manager +2 moreAkkadian Provisioning Manager Engine (PME) Hard-Coded Credentials8.2 High
- schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City (EVC1S22P4 /...9.8 Critical
- schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City (EVC1S22P4 /...9.8 Critical
- dell networking, emc powerswitch s4112f-on, emc powerswitch s4112t-on +11 more +13 moreDell EMC Networking S4100 and S5200 Series Switches manufactured prior to February 2020 contain a...9.8 Critical
- knx engineering tool software 5KNX ETS5 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev.8.8 High
- taiwan secom co., ltd., door access control and personnel attendance management system, secom dr.id access control +1 moreTAIWAN SECOM CO., LTD., Door Access Control and Personnel Attendance Management system - Use of Hard-coded Credentials9.8 Critical
- dlink dir-3040 firmwareA hard-coded password vulnerability exists in the Zebra IP Routing Manager functionality of D...7.5 High
- Show moreLoading…